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PRELIMINARY AMENDMENT 

Sir: 

Prior to calculation of the filing fee and 
examination, please amend the above-identified application 
as follows: 

IN THE CLAIMS 

1. (as amended) A [S] system for copy protection of recorded 
information, [comprising] including an information carrier 
comprising a medium mark representing a first bitpattern 
[ (x) ] , a recorder for recording the information on the 
information carrier and a player for reproducing the 
recorded information from the information carrier, 
[characterized in that] the recorded information [comprises] 
includes a watermark representing a second bitpattern [ (y) ] , 
which second bitpattern has a predefined relationship to the 
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first bitpattern, and in that the recorder [comprises] 
includes encoder means [(23)] for embedding the watermark in 
the information and generator means [ (25) ] for generating 
the second bitpattern according to the predefined 
relationship between the first and the second bitpattern, 
and in that the player [comprises] includes verification 
means [ (29) ] for verifying the relationship between the 
second bitpattern and the first bitpattern. 

2. (as amended) The [S] system as claimed in claim 1, 
characterized in that the relationship [comprises] includes 
a cryptographic one-way function. 

3. (as amended) The [S] system as claimed in claim 2, 
characterized in that the second bitpattern [ (y) ] is 
generated by applying a one-way function to the first 
bitpattern [ (x) ] . 

4* (as amended) The [S] system as claimed in claim 1, [2 or 
3,] characterized in that the second bitpattern identifies 
the encoder means* 

5. (as amended) A [R] recorder for use in the system of 
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claim 1,[ 2, 3 or 4] for recording information on an 
information carrier comprising a medium mark representing a 
first bitpattern [ (x) ] , [characterized in that] the recorder 
[comprises] includes encoder means [(42)] for embedding a 
watermark in the information, the watermark representing a 
second bitpattern [ (y) ] , and generator means [(43)] for 
generating the second bitpattern according to a predefined 
relationship between the first and the second bitpattern. 

6. (as amended) The [R] recorder as claimed in claim 5, 
characterized in that the recorder comprises marking means 
[(46)] for creating the medium mark on the information 
carrier and in that the generator means [comprise] includes 
means [(44)] for generating the first bitpattern from a seed 
[ (u) ] according to a further predefined relationship. 

7. (as amended) The [R]recorder as claimed in claim 5 [or 
6], characterized in that the generator means [(43)] are 
arranged for generating the first bitpattern [ (x) ] by 
combining a first part [ (x c ) ] represented by a prepressed 
mark on a recordable information carrier and a second part 
[ ( x 2^ 1 generated from the seed [ (u) ] . 
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8. (as amended) The [R]recorder as claimed in claim 6 [or 
7], characterized in that the further predefined 
relationship [comprises] includes a cryptographic one-way 
function. 

9. (as amended) An [I] information carrier for use in the 
system of claim 1, [2, 3 or 4,] the information carrier 

[ (51) ] comprising recorded information and a medium mark 
[(50)] representing a first bitpattern [ (x) ] , characterized 
in that the recorded information [comprises] includes a 
watermark representing a second bitpattern [ (y) ] , which 
second bitpattern has a predefined relationship to the first 
bitpattern. 

10. (as amended) The [I] information carrier as claimed in 
claim 9, characterized in that the first bitpattern 
[comprises] includes a first part [ (x c ) ] identifying a 
source of the information carrier, and a second part [ (x t ) ] 
identifying the recorded information. 

11. (as amended) A [P]p_layer for use in the system of claim 
1, [2, 3 or 4] for reproducing information from an 
information carrier [(51)] and comprising means [(50)] for 
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detecting a medium mark representing a first bitpattern 
[(x)], characterized in that the player [comprises] includes 
watermark read means [(55)] for detecting a second 
bitpattern [ (y) ] represented by a watermark in the recorded 
information, and in that the player [comprises] includes 
verification means [(53,54)] for verifying a predefined 
relationship between the second bitpattern and the first 
bitpattern. 

12. (as amended) The [P]player as claimed in claim 11, 
characterized in that the verification means [comprise] 
includes a cryptographic one-way function [(53)]. 

13. (as amended) The [P]player as claimed in claim 12, 
characterized in that the verifications means are arranged 
for generating a verification pattern [(y')] by applying a 
one-way function to the first bitpattern [ (x) ] and 
[comprises] includes means [(54)] for comparing the 
verification pattern [(y')l and the second bitpattern [ (y) ] . 

Please add the following as new claims: 

14. The system of claim 1, in which: 
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the relationship includes a cryptographic one-way 

function, 

the second bitpattern is generated by applying a 
one-way function to the first bitpattern, and 

the second bitpattern identifies the encoder 

means . 

15. The recorder of claim 5, in which: 

the second bitpattern is generated by applying a 
one-way function to the first bitpattern, 

the second bitpattern identifies the encoder 

means , 

the recorder includes marking means for creating 
the medium mark on the information carrier and in that the 
generator means include means for generating the first 
bitpattern from a seed according to a further predefined 
relationship, 

the generator means are arranged for generating 
the first bitpattern by combining a first part represented 
by a prepressed mark on a recordable information carrier and 
a second part generated from the seed, and 

the further predefined relationship includes a 
cryptographic one-way function. 
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16 • The information carrier of claim 9, in which: 

the relationship includes a cryptographic one-way 

function, 

the second bitpattern is generated by applying a 
one-way function to the first bitpattern, and 

the second bitpattern identifies the encoder 

means . 

17. The player of claim 12, in which: 

the relationship includes a cryptographic one-way 

function, 

the second bitpattern is generated by applying a 
one-way function to the first bitpattern, and 

the second bitpattern identifies the encoder 

means . 

IN THE ABSTRACT 
Please delete in its entirety and replace with the 
following: 
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—ABSTRACT OF THE DISCLOSURE 
A system for copy protection of recorded 
information is disclosed, including an information carrier, 
a recorder and a player. The information carrier, e.g. an 
optical disc, includes a medium mark representing a first 
bitpattern, which medium mark cannot be copied on standard 
recording devices. The recorded information includes a 
watermark representing a second bitpattern, which second 
bitpattern has a predefined relationship to the first 
bitpattern. The watermark cannot be manipulated without 
disturbing the quality of the reproduction of the 
information. The relationship, preferably a one-way 
function, between the watermark and the medium mark requires 
that an illegal copy also has the corresponding medium mark. 
As neither the watermark nor the medium mark can be 
manipulated, a strong protection against illegal copying is 
achieved. The recorder includes encoder means for embedding 
the watermark in the information and generator means for 
generating the second bitpattern according to said 
relationship. The player includes verification means for 
verifying said relationship. — . 
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REMARKS 

The claims have been amended to delete multiple 
dependencies. The abstract has been amended to conform to 
U.S. practice. 

The above amendments are submitted to place this 
application in proper U.S. format. Entry is respectfully 
solicited. 

Respectfully submitted, 

BV ^UJ^^$^ 
Michael E. Belk, Reg. 33,357 
Attorney 
(914) 333-9643 
January 26, 1998 
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1 16.01.1998 
System for copy protection of recorded signals. 



The invention relates to a system for copy protection of recorded 
information, comprising an information carrier comprising a medium mark representing a 
first bitpattern, a recorder for recording the information on the information carrier and a 
player for reproducing the recorded information from the information carrier. 
5 The invention further relates to a recorder for recording information on an 

information carrier comprising a medium mark representing a bitpattern. 

The invention further relates to an information carrier comprising 
q recorded information and a medium mark representing a bitpattern. 

=5 The invention further relates to a player for reproducing information from 

H 10 an information carrier and comprising means for detecting a medium mark representing a 
yS bitpattern. 

j]T Copy protection has a long history in audio publishing. The presently 

;L installed base of equipment, including PC's with audio cards, provide little protection against 

M: unauthorized copying. In any copy-protection scheme, the most difficult issue is that a pirate 

^ 15 can always attempt to playback an original disc, he can treat the content as if it were an 
J3 analog home recording and record this. Consumer recorders should be able to copy 

recordings of consumer's own creative productions without any limitation, but prohibit the 
recording of copy-right material. Thus, the copy protection mechanism must be able to 
distinguish between consumers' own creations and content that originates from professional 
20 music publishers. The equipment must make this distinction based on the content only, as 
any reference to the physical source of content (e.g. disc or microphone) is unreliable. For 
digital storage media such as DCC, "copy bits" have been defined, which bits indicate a 
copyright status, e.g. "no copy allowed", "free copy" or "one generation of copy allowed". 
Other copy bits may indicate that the medium storing the information must be a 
25 "professional" medium manufactured by pressing and not a "recordable" disc. 

A system for copy protection of recorded information comprising a 
recorder, information carrier and player, is known from EP-0545472 (Dl of the list of 
relevant documents). The copy protection is based on a so-called medium mark, i.e. a 
physical mark representing a bitpattern indicating the status of the medium, e.g. a code 
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indicating a "professional" disk manufactured by pressing. A medium mark should not be 
copyable or changeable by standard recording equipment, and therefore it is to be stored on 
the information carrier in a manner different from the recorded information, such as audio or 
video. The medium mark is detected by the player and if it is not present or indicates a 
5 different status (e.g. "recordable disc" on an illegal copy), reproduction is blocked. The 
known information carrier comprises a prearranged guiding track, a so-called pregroove. In 
the track determined by the pregroove, information can be written in a predefined manner 
represented by optically readable patterns which are formed by variation of a first physical 
parameter, such as the height of the scanned surface. The pregroove has variations in a 

10 second physical parameter, such as an excursion in a transverse direction, also denoted as 
wobble. The wobble is FM modulated and this modulation represents a bitpattern which is 
used for recovering the information, e.g. a descramble code for recovering information 
stored as scrambled information. Said bitpattern constitutes a medium mark, because the 
track wobble cannot be copied to a recordable disc on standard recording equipment. The 

15 known player comprises reading means for reading the optical patterns and recovering means 
for recovering the bitpattern from the medium mark. The player and information carrier 
form a system for controlled information reproduction. For this purpose, the player 
comprises means for reproducing the information in dependence on the medium mark. If the 
information is copied on a writable information carrier, the information of this copy will not 

20 be reproduced by a player, because during the writing process only the optical patterns are 
written in the predefined manner and the copy itself does not contain any medium mark. 

A problem in the known system is that copying the information after 
reproduction cannot be sufficiently controlled. If the information comprises said copy bits, 
such bits can be manipulated easily, e.g. on a PC or in a small electronic circuit. The 

25 information with the manipulated bits can be copied freely. If the information is recorded in 
a scrambled way and de-scrambled during reproduction using the medium mark bitpattern, 
the information can be recorded in its plain (descrambled) status and is not protected against 
copying at all. 

It is an object of the invention to provide a system in which copying is 
30 better controlled and the copy protection cannot be circumvented by simple manipulation of 
the copy bits. 

For this purpose, the system according to the invention is characterized in 
that the recorded information comprises a watermark representing a second bitpattern, which 
second bitpattern has a predefined relationship to the first bitpattern, and in that the recorder 
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comprises encoder means for embedding the watermark in the information and generator 
means for generating the second bitpattern according to the predefined relationship between 
the first and the second bitpattern, and in that the player comprises verification means for 
verifying the relationship between the second bitpattern and the first bitpattern. The 
5 watermark is indicative of the copyright status of the recorded information. This has the 
advantage, that a signal representing the information after reproduction still comprises the 
watermark and a recorder can be aware of the copyright status of the signal offered for 
copying, whereas the copyright status of the signal indicated by the watermark cannot be 
changed or manipulated without disturbing the signal. The prior art system using the medium 
10 mark as descramble key or a fixed code is vulnerable to an 'illegal' recordable disc have a 
fixed, false medium mark. For example, any information read from a scrambled copy 
protected disc can be recorded on an illegal copy after (re-)scrambling using the fixed, false 
key. The relation between the watermark bitpattern and the medium mark bitpattern requires 
2 that the medium mark bit correlates with the recorded information. Hence in the system 

15 according to the invention a fixed, false medium mark cannot be used to make illegal copies. 
As there is a predefined relation defined between the first (medium) bitpattern and the second 
(watermark) mark bitpattern, a strong copy protection is realized, because an illegal copy 
!U must contain the specific medium mark correlated to the watermark according to the 

H predefined relation and therefore the malicious party is forced to get hold of said relation for 

ijl 20 manipulation. Choosing a suitable relation can create a barrier against such manipulation. 

The detection of the watermark in the player is relatively simple and the information read 
from the information carrier does not require any processing, such as descrambling. 
Verification in the player of the watermark bitpattern against the medium mark is a strong 
protection against copying, as neither of said marks can be easily manipulated. A further 
25 advantage is, that the verification function in the player can be relatively slow, as the 

verification of said predefined relationship needs to be performed only once when starting the 
reproduction of the recorded information. 

It is to be noted, that WO 97/13248-A1, which is filed before but 
published after the priority date of this invention (PHN 15391, document D2) describes a 
30 watermarking system for a video signal. The watermarked video signal is recorded on a disk 
comprising a medium mark. However the medium mark only indicates the type of medium 
and has no correlation with the signal or the watermark. 

A preferred embodiment of the system is characterized in that the 
relationship comprises a cryptographic one-way function. The one-way function prevents that 
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when the required result (e.g. the watermark bitpattern) is known, that the source (e.g. the 
medium mark bitpattern) can be found by calculating 'backwards'. This has the advantage, 
that the malicious party is forced to obtain the medium mark bitpattern directly from the 
original medium. The original medium may not be available to him or the player may be 
5 equipped not to make the medium mark bitpattern externally available. This creates a 
significant barrier for the malicious party trying to make an illegal copy with a "Chinese" 
copy of the medium mark. 

These and other aspects of the invention will be apparent from and 
elucidated with reference to the embodiments described hereinafter and with reference to the 
10 accompanying drawings, in which 

Figure 1 shows conditional playback rules, 
Figure 2 shows a copy protection system comprising a recorder, 
^ information carrier and player, 

O Figure 3 shows a one-way function, 

\ j 15 Figure 4 shows a recorder, and 

l jj Figure 5 shows a player. 

M We propose a copy control method for bitstream- or DSD-signals (Direct Stream Digital) 

stored on storage media such as DVD audio (Digital Versatile Disc). The method relies on a 
7" watermarking method, such as the one proposed by A.A.M. Bruekers et al, described in 
p 20 document D3 of the list of relevant documents. Recently, it has been realized that 
5: watermarks or embedded signalling can be used to make copy protection methods more 

robust against attacks. Embedded signalling or watermarking is a method of burying 
information in the audio content. In this text we use the word professional for any product 
that is officially registered with a trusted party which represents the interests of the recording 
25 industry and hardware manufacturers. We denote any other product as a consumer product. 
Consumer products are assumed to obey copyright rules, enforced either by a patent 
licensing agreement or by law, or both. 

For Copy Protection a total solution is needed. Watermarking is not restricted to digital 
formats, but can also be embedded and detected in analog signals. Often, spread-spectrum 
30 technology is proposed for embedding watermarks into audio. A technical difficulty of 
spread-spectrum methods is that retrieval or detection of such embedded data requires 
substantial signal processing. Although this is not a problem for professional equipment used 
in legal cases to prove the origin of the audio material, the computational effort appears far 
beyond what is feasible and economically reasonable within consumer electronic products to 
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support copy protection. A particular problem is that the audio quality requirements set by 
the music industry would require such large spreading gains that synchronization and data 
detection would take excessively long integration times. Parameters considered in spread 
spectrum watermarking presumably do not satisfy current audio quality requirements. Future 
5 standards aim at further enhancing the audio quality and simultaneously require secure 
protection of music IPR. It is our strong belief that it is unlikely that satisfactory methods 
will indeed be found in near future to combine these two requirements at reasonable cost. 
Particularly the absence of protective measures in the installed base of audio equipment 
causes a problem. It appears virtually impossible to avoid that signals can be copied by going 
10 back to analog. Moreover, consumer expectations are that some kind of home taping, e.g. to 
listen in the car, should be possible. On top of that, in some countries that levy a fee on 
blank tape for analog copying for private use, certain technical means to restrict analog 
3 copying are not legally acceptable. There appears an opportunity to set new standards for 
Q storage and representation of digital audio (e.g. DVD), but technology to solve the copy 

15 protection issue completely (i.e., including analog copying) is unlikely to become available 
*2 soon. For audio a bitstream-only solution may be of use. Given this situation, it can be 
M useful to protect new audio storage media against "Chinese" copying of discs, even if analog 
;L copying remains possible. In order to copy, conversion into other domains (e.g. analog) are 
H needed and some loss of quality occurs. The scheme proposed here using digital 
f 20 watermarking does not solve the existing problem of piracy and excessive home taping 
5 whereby the audio signal is converted to analog as part of the copy process. If the industry 
adopts a copy protection scheme based on watermarking, it will presumably come to a 
layered approach. The most robust watermark should withstand D/A and A/D conversion, 
but this will require long integration times for the detection. This implies that the record or 
25 playback inhibit decision will be delayed. A watermark in the bitstream can be detected 
within milliseconds and trigger copy protective measures immediately. Such fast detection 
appears essential if bitstream signals are transferred over open busses (such as P 1394). In 
summary, the method described in this document has the following properties: 

- Bitstream or DSD signals with copy-right restrictions can immediately be distinguished 
30 from home recordings. 

- Traceability of the professional or consumer recorder. 

- It can co-exist with other methods that also protect against other forms of copying (e.g. 
analog). In particular, it appears of interest to add conditional playback using the method 
proposed here to a conditional recording method which also checks for spread spectrum 
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watermarks. 

In the invention we propose a scheme that protects against direct (bitwise) copying of high 
quality digital DSD streams. The method does not technically protect against conversion of 
DSD to PCM or analogue. However, some protection is provided against such attacks in the 
5 sense that if a bitstream / DSD signal, it is converted back into DSD may be watermarked 
with the serial number of the consumer DSD encoder. The method relies on a watermarking 
method, such as the one proposed by A.A.M. Bruekers et al. Our method can coexist with 
many other forms of copy protection, including serial copy management bits and the 
embedded signalling of spread spectrum watermarking. The additional hardware in consumer 
10 equipment appears very small. Another tool used in the system embodiment is a medium 
mark, i.e. a method to distinguish a professionally mastered disc from a recordable. 
Implementations of such tool can be a wobble key (as known from Dl), modulation of 
3 channel code errors (e.g. EFM) or intentional modulation the jitter of pits and lands of a 
O disc, or embedding an on-disc chip, or just data written in the lead-in area which is not 
jTJ 15 accessible by consumer recorders. These two tools (watermark and medium mark) are used 
l jj to support the following features (both or just one): 

M - Conditional recording is the most commonly known method for copy protection. A 

« consumer recorder will not record material unless it sure that the material may indeed be 
^ copied legally. 

m 20 - Conditional playback, on the other hand, accepts that some people will be able to get the 
bits of copy-righted DSD on a pirate disc anyhow. 

Conditional playback will make sure that such a pirate disc can not playback on consumer 
players. That is, pirates cannot commercially distribute illegal copies. In conditional 
playback, a consumer DVD audio player will only play audio discs if certain copyright 

25 conditions are met. The player identifies the audio content either as a consumer recording or 
as professionally published audio content, by detecting or checking for a watermark in the 
audio stream. In the latter case (professional content protected by copyright), the player 
checks whether the physical disc is original and professionally mastered, rather than a copy 
on a consumer recorder or consumer disc press. This requires both a marking method for the 

30 content (watermarking) and a method for marking the physical storage medium that can only 
be produced by a professional recorder or pressing machine. 

Figure 1 shows schematically the conditional playback rules embedded in 
the consumer player, which are applied after a watermark has been detected. As a first check 
1 1 the presence of the medium mark, usually a physical mark, is detected by the reading 
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head in a manner different from reading recorded information, e.g. by demodulation said 
wobble. If the medium mark is present it is verified to be a valid professional disc mark at a 
second check 16, and if so playing 17 is enabled if the watermark and the medium mark 
correlate according to a predefined relation. If the medium mark is not present or indicates a 
5 consumer recorded disc (checked in a third check 12), the watermark is decoded in decoder 
13. The watermark may be indicative for free-to-copy (audio) information, and then playing 
14 of the disc is enabled. If the watermark is indicative for copy-protected information, the 
playing action is blocked in state 15. 

In a first embodiment of the system professionally mastered audio discs 
10 carry an identifier unique to the publisher, which can not be copied. This identifier can for 
instance be a set of bits written in an area that is not accessible for recorders, it can be a 
wobble key or a special pattern in the running DC component of the EFMplus channelcode 
3 used in DVD. The DVD audio player checks for this mark. If this mark is unavailable or if 
O it contains a special code reserved for home disc recorders, it will only playback the DSD 
I Tj 15 stream if a special watermark is found that identifies the DSD encoder. If this watermark is 

not found, as would be the case if a professionally released audio stream is copied illegally to 
M a recordable disc, the audio is not played back at all. To avoid any degradation of the quality 
;U of professional DSD releases this scenario does not require that the audio content of 
^ professionally released audio titles is watermarked, but this scenario requires that the 
rS 20 watermark embedding method is used in consumer equipment. Besides a frequently repeated 
:J copy control bit, a unique serial number is embedded into the audio stream by all DSD 
encoders/recorders in the consumer market. The circuitry to embed this number appears 
simple. The consumer can not copy professional DSD audio directly to a DVD audio disc, as 
it will not playback (because of the watermark be absent). If he converts the signal to analog, 
25 PCM or another format, and then re-creates DSD, the particular DSD recorder can be 
traced. Moreover, the scheme can be defined in such a way that home recordings have 
smaller dynamic range. A further strengthening is achieved if each player not only checks 
whether a watermark is present on consumer discs, but also check whether a valid serial 
number is embedded. Known cryptographic methods can be used for integrity checks, e.g. 
30 concatenating a digital signature to the serial number. This avoids that a pirate can tamper 
with serial numbers. 

A second embodiment is similar to the first, but the bit stream of 
professionally released audio does also contain a watermark. This watermark is used to 
verify the medium mark in a cryptographic way. The medium mark now differs from title to 
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title* The relation between the bitpattern represented by the watermark and the bitpattern 
represented by the medium mark is not easy to manipulate. Preferable the cryptographic 
relation is chosen as follows. Let y = F(x) and x = G(u) be two cryptographic one-way 
functions, i.e. their inverse is computationally infeasible to compute with finite arithmetic 
5 resources. This scenario uses a seed u to create x and y, according to x = G(u) and y = 
F(x)= F(G(u)). In this concept G and F may be the same function, but this is not necessary. 
On a professionally mastered disc, the embedded watermark contains y and the medium mark 
carries x. Professional recorders always perform the G function before writing a medium 
mark. That is, they embed a medium mark x which is internally generated from the user 
10 input u. All (consumer) players perform F to verify the medium mark if a watermark is 
found that indicates that the content is copy protected. Consumer recorders are assumed not 
to be able to write a medium mark at all. Using the system the copy-right owner can decide 
5 himself whether or not to release the seed u, which allows copying. In professional music 
□ publishing, it can be necessary to create a tape master of the music title. The audio is then 
3 3 15 pre-encoded with embedded the watermark y. During the production process, the 
J] professional recorder (disc master generator machine) directly accepts the watermarked DSD 
U 30 and inserts this after the DSD encoder/ watermarker 23 of Figure 2. Seed u 22 is also 
L inserted during this process. This also provides some protection if the master tape is stolen, 
but u is not compromised. Preferably, the recorder checks the watermark against u and x (as 
20 described with Figure 4, conditional recording). 
5 Figure 2 shows a copy protection system comprising a recorder, 

information carrier and player. The Professional Recorder comprises an audio input 21 to a 
DSD encoder 23, which also embeds the watermark bitpattern y in the bitstream 30 to be 
recorded on the master disc 26. Said watermark bitpattern y is available on the output of 
25 generator 25, which has bitpattern x to be represented by the medium mark 20 on its input. 
The medium mark 20 is created on the master disc 26. Preferably the bitpattern x is 
generated by a generator 24 from the input seed u on the input 22. The master disc 26 is 
multiplied by the usual manufacturing methods to copy protected information carriers 27, 
which are to be played in the consumer player 28. The consumer player comprises a verifier 
30 29, which compares the detected watermark bitpattern y with a calculated value y\ which is 
based on the detected bitpattern x from the medium mark. 

In this scenario, a pirate must have access to a compromised professional recorder to create 
media marks on a pirate disc. A pirate can copy the audio and recover y, but he cannot 
calculate x. This system adds security to the copy protection scheme, particularly if we can 
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ensure that x cannot easily be read from the disc, i.e., remains within the first chip in the 
basic engine (that must use x to verify watermark y). Moreover, even if a pirate can read x, 
he must find u to enter it into the recorder and to have x written as medium mark. No 
recorder will directly accept to x and write it to disc. In this scenario, a pirate must 
5 physically modify both his (officially registered mastering) recorder (to bypass the G 
function) and his player (to extract x). 

In a further embodiment copy protection can be provided for consumer 
recordings. It can be envisioned that consumers want to publish or disseminate their own 
recorded audio creations at a small scale. We now describe how consumer recorders can 

10 implement some of the elements of the above scheme. This gives consumers the possibility to 
create discs that can only be copied directly (bit-by-bit) if the recipient also knows seed u. 
Part of the medium mark must be recordable by the recipient. A possible embodiment is to 
split x into two parts, with x = x v j | x 2 , such that y = F(x t | j x 2 ). Then x t acts as a 
medium mark, similar to the scenario described above, and x 2 is written as a separate file on 

15 the disc. Professional recorders can write x x as well as x 2 . Consumer recorders can write x 2 
but on recordable discs, x x has a default value x x = x_c prepressed on the disc. The 
consumer recorder embeds watermark y = F(x_c \ jx 2 ) where x 2 is generated from a seed u, 
i.e., by taking a portion of the bits of G(u). The owner can copy his own creations because 
he knows u. In players, neither x t nor x 2 leaves the basic engine, so it remains hidden for the 

20 user. 

For the above embodiments a suitable relation between the watermark 
bitpattern and the medium mark bitpattern is a one-way function. An implementation of the 
one-way function can be y = x 2 mod N with N a public modulus. Here N is the product of 
two secret large primes (N = p q). In fact N can be part of the data that is embedded in the 

25 watermark, i.e., concatenated to y. Another possibility is the discrete-log one-way function 
conjectured by Diffie and Hellman [1976] (= document D6): F(x) = a x in GF(p) with a a 
primitive element of GF(p). Here p is a large prime such that p-1 has a large prime factor. 
The above two implementations bear the disadvantage that the size of the arguments, i.e., the 
number of bits needed to be secure, is quite large. A practical system based on fewer bits 

30 can be to apply an appropriate secret-key encryption algorithm, e.g. the DES, with y = F(x) 
= x ® DES(x). This is illustrated in the circuit of Figure 3. Figure 3 shows an 
implementation of a one-way function generator based on secret-key encryption algorithm. 
On the input 31 the medium mark bitpattern x is applied and processed in the encryptor 32 
by using a key from a key input 33. The output of encryptor 32 is bitwise EXOR'd to the 
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input x by logic unit 34, resulting in bitpattern y on the output 35. In this circuit, the key can 
be made public or included in the watermark, i.e. concatenated to y. 

Figure 4 shows a recorder for consumers. The recorder has an analog 
audio input 41 connected to an encoder 42 for DSD or PCM audio encoding, which encoder 
5 produces on the output a bitstream 47 to be recorded on recordable disc 48. The encoder 42 
embeds a watermark bitpattern y in the bitstream 47. The bitpattern y is created by generator 
43 from a bitpattern x, whereas x is to be represented by a medium mark 46 and may 
comprise a number of bits derived from a prepressed physical mark on the recordable disc 
48. The recorder has a seed input 45 for a seed u connected to a generator 44 for generating 
10 the bitpattern x. The recorder has a second input 40 for a digital audio signal connected to a 
watermark checker 49. The checker 49 is also connected to generator 43 for receiving 
bitpattern y and verifies the presence of a watermark. The basic recording control function of 
z the checker is to block recording if a professional "no-copy" watermark is detected. 

5 Preferably a watermark is embedded when no watermark is detected in the digital input 

j ^ 15 signal. If a watermark is present indicative of copyable content a recording can be made only 
C if the corresponding seed u is applied to the seed input 45. In a different embodiment the 

J consumer recorder only has the digital input 40 and the watermark checker 49, whereas the 

;L analog input and watermark encoder are not present. Further embodiments of the recorder 

M are equal to the above but are not provided with an external input 45, but have an internal 

jyj 20 generator for u, e.g. a random number generator. In that case also generator 44 may not be 
C present. 

In its pure form, a conditional recording scenario does not perform checks 
during playback. In a different embodiment the consumer DSD recorder accepts an analog 
signal, possibly conditional to some analog copy information check. The on-board DSD 

25 encoder embeds a watermark into the stream. This mark consists of two parts: copy 

protection data and a serial id. number of the recorder. The consumer DSD recorder accepts 
a digital DSD stream only if it can recognize valid copy control data. This copy control data 
should state that this material may legally be copied onto a disc. Such a recorder is similar to 
the recorder shown in Figure 4, but does not have the seed input 45 and generator 44. 

30 The consumer DSD recorder does not accept a DSD stream that contains 

Copy Control Marks that prohibit recording. In an embodiment of a strong form, the absence 
of Copy Control Information is interpreted as "no copy allowed". In a weaker form, signals 
without copy control information are automatically resampled and watermarked. This 
weakens the copy protection, but leads to some quality degradation. 
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In a further embodiment a copy once feature is included. A professional 
DSD stream contains embedded copy-right data that grants permission to copy once. This can 
be implemented by embedding a further watermark y^ (in addition to mark described 
earlier). Moreover the professional disc contains a special permission mark x w where y^ = 
5 HCx^) with HO a cryptographic one-way function. The mark y co remains with the audio 
(possibly embedded) during playback, but it is removed by the consumer recorder. 

Figure 5 shows a player 52 for reproducing information from a copy 
protected information carrier 51. The player is provided with a read head 58 and read signal 
processing means of a usual type, such as an optical head, a detector, a channel decoder and 
10 an error decoder of a CD or DVD optical disc player. The player comprises watermark read 
means 55 for detecting a bitpattera y represented by the watermark in the recorded 
information on the information carrier 51. The bitpattern y is coupled to a logic unit 54, 
□ which operates the enabling switch 56. The logic function of unit 54 has been discussed with 

q reference to Figure 1 and the conditional playback rules. The player is provided with means 

jTj 15 50 for detecting the medium mark and deriving the bitpattern x from the medium mark, e.g. 
IJt by demodulating the wobble modulation as known from Dl. The player is provided with 

il : verification means for verifying a predefined relationship between the bitpattern x and the 

!U bitpattern y. The bitpattern x is coupled to a function unit 53 for performing a predefined 

M function F(x), e.g. a one-way function. The output y' of the function unit 53 is coupled to 

;^ 20 logic unit 54 and compared to y. The enabling switch 56 passes the recovered audio signal to 
y the output 57 if the bitpatterns x and y do show said predefined relationship. 

It is noted that hybrid solutions using conditional recording and 
conditional playback can co-exist. Of particular interest is a scenario in which (despite 
technical difficulties described in the introduction) a watermark check in the analog domain 
25 should be performed by recorders. If a pirate manages to modify his recorder to bypass this 
conditional recording check, and put professional DSD on a disc anyhow, the copy protection 
schemes described here can prevent playback on players in the market. 

Although the invention has been explained mostly by embodiments using 
DSD audio, several embodiments of the watermarking of audio and/or video can be used. 
30 Watermarking is also possible for PCM audio. An example is hiding data in the LSB's, 

possibly including a spectral shaping of their effect. An implementation for such embedding 
scheme has been presented by Oomen et al. in 1994 (document D4). For our application, we 
preferably would only embed data in a limited number of preselected samples, with one bit 
per selected sample. Such embedding scheme can be implemented within the same device 
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that converts professional (24 bit) audio into lower resolution (e.g. 16 bits) The method 
previously mentioned for DSD watermarking (in D3) may also be used for embedding data in 
PCM. Another option is to use the loss-less encoding for embedded signalling. One method 
for lossless encoding was proposed by Bruekers et al (described in document D5) A possible 
5 method of embedding data is by choosing the properties or parameters of the predictive filter 
(Fig. 10, item 152 in D5) in accordance with watermarking rules. For instance, a digital 
watermark "1 M can be represented by choosing an even number of filter taps and a "0" is 
represented by an odd number of taps. In another implementation, the filter coefficients are 
quantized according to a similar rule. Further, the entropy encoder can embed data by 
10 adapting its parameters. Such signals embedded into the PCM signal can be used to build a 
copy protection scheme based on any of the previously mentioned concepts. A pirate can no 
longer copy the compressed PCM bit-by-bit onto a disc that he can distribute commercially. 
Q He must go through the process of decompression and compression. Although this does not 

g lead to a degradation in quality (because the coding is loss-less), it results in a different 

rj 15 digital signal, the resulting file will contain more bits if consumer recorders can compress 
J1 less efficiently and the resulting file will contain information about the serial number of the 

u ; recorder. 

L In the embodiments a disc has been described as information carrier, but 

any other carrier can be used in the invention, such a tape or broadcast, as long as the 
20 medium mark is supplied in a way which cannot be easily copied. Further the invention lies 
J: in each and every novel feature or combination of features. 
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CLAIMS: 



1. System for copy protection of recorded information, comprising an 
information carrier comprising a medium mark representing a first bitpattern (x), a recorder 
for recording the information on the information carrier and a player for reproducing the 
recorded information from the information carrier, characterized in that the recorded 

5 information comprises a watermark representing a second bitpattern (y), which second 
bitpattern has a predefined relationship to the first bitpattern, and in that the recorder 
comprises encoder means (23) for embedding the watermark in the information and generator 
Q means (25) for generating the second bitpattern according to the predefined relationship 

q between the first and the second bitpattern, and in that the player comprises verification 

jTj 10 means (29) for verifying the relationship between the second bitpattern and the first 
m bitpattern. 

2. System as claimed in claim 1, characterized in that the relationship 
;;L comprises a cryptographic one-way function. 

M 3. System as claimed in claim 2, characterized in that the second bitpattern 

jJJ 15 (y) is generated by applying a one-way function to the first bitpattern (x). 
g 4. System as claimed in claim 1, 2 or 3, characterized in that the second 

bitpattern identifies the encoder means. 

5. Recorder for use in the system of claim 1, 2, 3 or 4 for recording 
information on an information carrier comprising a medium mark representing a first 

20 bitpattern (x), characterized in that the recorder comprises encoder means (42) for embedding 
a watermark in the information, the watermark representing a second bitpattern (y), and 
generator means (43) for generating the second bitpattern according to a predefined 
relationship between the first and the second bitpattern. 

6. Recorder as claimed in claim 5, characterized in that the recorder 

25 comprises marking means (46) for creating the medium mark on the information carrier and 
in that the generator means comprise means (44) for generating the first bitpattern from a 
seed (u) according to a further predefined relationship. 

7. Recorder as claimed in claim 5 or 6, characterized in that the generator 
means (43) are arranged for generating the first bitpattern (x) by combining a first part (x c ) 
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represented by a prepressed mark on a recordable information carrier and a second part (xj) 
generated from the seed (u). 

8 - Recorder as claimed in claim 6 or 7, characterized in that the further 
predefined relationship comprises a cryptographic one-way function. 

9 - Information carrier for use in the system of claim 1, 2, 3 or 4, the 
information carrier (51) comprising recorded information and a medium mark (50) 
representing a first bitpattem (x), characterized in that the recorded information comprises a 
watermark representing a second bitpattern (y), which second bitpattem has a predefined 
relationship to the first bitpattern. 

10 - Information carrier as claimed in claim 9, characterized in that the first 
bitpattern comprises a first part (xj identifying a source of the information carrier, and a 
second part (x,) identifying the recorded information. 

H- Player for use in the system of claim 1, 2, 3 or 4 for reproducing 

information from an information carrier (51) and comprising means (50) for detecting a 
medium mark representing a first bitpattern (x), characterized in that the player comprises 
watermark read means (55) for detecting a second bitpattern (y) represented by a watermark 
in the recorded information, and in that the player comprises verification means (53,54) for 
verifying a predefined relationship between the second bitpattern and the first bitpattern. 
12 - Player as claimed in claim 11, characterized in that the verification means 

comprise a cryptographic one-way function (53). 

13 • Player as claimed in claim 12, characterized in that the verifications 

means are arranged for generating a verification pattern (y') by applying a one-way function 
to the first bitpattern (x) and comprises means (54) for comparing the verification pattern (y') 
and the second bitpattern (y). 
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ABSTRACT: 

System for copy protection of recorded signals. 



A system for copy protection of recorded information is disclosed, 
comprising an information carrier, a recorder and a player. The information carrier, e.g. an 
optical disc, comprises a medium mark representing a first bitpattern, which medium mark 
cannot be copied on standard recording devices. The recorded information comprises a 
5 watermark representing a second bitpattern, which second bitpattern has a predefined 

relationship to the first bitpattern. The watermark cannot be manipulated without disturbing 
the quality of the reproduction of the information. The relationship, preferably a one-way 
function, between the watermark and the medium mark requires that an illegal copy also has 
the corresponding medium mark. As neither the watermark nor the medium mark can be 
10 manipulated, a strong protection against illegal copying is achieved. The recorder comprises 
encoder means for embedding the watermark in the information and generator means for 
generating the second bitpattern according to said relationship. The player comprises 
verification means for verifying said relationship. 
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